Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The PopAd plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4.Check if you run itEPSS 0.16%Sep 4, 2025
- High7.1Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions does not restrict the saving of requestCheck if you run itEPSS 0.52%Sep 4, 2025
- UnknownXWiki xwiki Transmission of Private Resources into a New Sphere ('Resource Leak')Patch nowKEVEPSS 0.95%Sep 4, 2025
- Medium5.3A vulnerability was detected in Jinher OA 1.0.Check if you run itEPSS 0.36%Sep 3, 2025
- Low2.9Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients.Check if you run itEPSS 0.71%Sep 3, 2025
- Medium6.3Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures.Check if you run itEPSS 0.34%Sep 3, 2025
- Medium4.3A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to upload arbitrary files tCheck if you run itEPSS 0.32%Sep 3, 2025
- Medium4.3A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacCheck if you run itEPSS 0.32%Sep 3, 2025
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in kamleshyadav Exit Intent Popup exitintentpopup allows Server Side Request Forgery.This issue affects Exit Intent Popup: from n/aCheck if you run itEPSS 0.17%Sep 3, 2025
- Medium4.4Server-Side Request Forgery (SSRF) vulnerability in gfazioli WP Bannerize Pro wp-bannerize-pro allows Server Side Request Forgery.This issue affects WP Bannerize Pro: from n/a throCheck if you run itEPSS 0.21%Sep 3, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Tickera Tickera tickera-event-ticketing-system allows Cross Site Request Forgery.This issue affects Tickera: from n/a through <=Check if you run itEPSS 0.14%Sep 3, 2025
- Medium5.9A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses.Check if you run itEPSS 0.45%Sep 3, 2025
- Low2.7SummaryUsers with webhook permissions can conduct SSRF via webhooks.Check if you run itEPSS 0.30%Sep 3, 2025
- High7.5The mikecao/flight PHP framework in versions prior to v1.2 is vulnerable to Denial of Service (DoS) attacks due to eager loading of request bodies in the Request class constructor.Check if you run itEPSS 0.45%Sep 3, 2025
- Medium4.6One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password (OTP)/Multifactor Authentication (MFA) bypass using response manipCheck if you run itEPSS 1.38%Sep 3, 2025
- Medium5.3An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interface.Check if you run itEPSS 1.72%Sep 3, 2025
- High8.8ATEN eco DC Missing Authorization Privilege Escalation Vulnerability.Check if you run itEPSS 0.56%Sep 2, 2025
- High7.5A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters.Check if you run itEPSS 2.33%Sep 2, 2025
- High8.2A vulnerability has been identified within Rancher Manager in which it did not enforce request body size limits on certain public (unauthenticated) and authenticated API endpoints.Check if you run itEPSS 0.52%Sep 2, 2025
- Medium6.9Lack of authorisation in Deporsite by T-INNOVA.Check if you run itEPSS 0.33%Sep 2, 2025
- Low2.3OpenAM (OpenAM Consortium Edition) contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14…Check if you run itEPSS 0.28%Sep 2, 2025
- Medium5.3A vulnerability was found in SimStudioAI sim up to 51b1e97fa22c48d144aef75f8ca31a74ad2cfed2.Check if you run itEPSS 0.29%Sep 2, 2025
- Medium6.5Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter.Check if you run itEPSS 1.85%Sep 2, 2025
- Medium6.5Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the command parameter.Check if you run itEPSS 1.08%Sep 2, 2025
- Low2.3A security flaw has been discovered in Langfuse up to 3.88.0.Check if you run itEPSS 0.29%Sep 1, 2025
Sort